CISA Launches CI Fortify for Infrastructure Isolation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) launched its CI Fortify initiative this week, urging owners and operators of critical infrastructure to bolster isolation and recovery capabilities against nation-state cyberattacks during potential geopolitical conflicts.

CISA Acting Director Nick Andersen announced the program, which targets the 16 critical sectors including energy, water, transportation, telecommunications, healthcare and financial services. The effort calls for organizations to prepare operations that can sustain essential services for weeks or months without relying on third-party connections such as the internet, telecommunications providers or vendors. "In a geopolitical crisis, the critical infrastructure organizations Americans rely on must be able to continue delivering at a minimum crucial services," Andersen said in a statement. "They must be able to isolate vital systems from harm, continue operating in that isolated state, and quickly recover any systems that an adversary may successfully compromise."

The initiative responds to ongoing intrusions by state-sponsored hackers. U.S. officials have identified Chinese groups including Volt...